This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json) Hash identifier: lMDeKOJr3le5EijzORt2HJM8APCwcS5yEdOGdDdXucQ= Subject key identifier: 6E:C4:3B:4E:88:9C:61:B7:1E:24:94:AD:6D:24:5F:3B:C2:8C:C1:45 Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Certificate serial: 019C40FD16E119D1D9C01B12EB0F504F5F7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft Manifest number: 0B18 Signing time: Mon 09 Feb 2026 06:00:54 +0000 Manifest this update: Mon 09 Feb 2026 06:00:54 +0000 Manifest next update: Tue 10 Feb 2026 06:00:54 +0000 Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: +5YdQLII2h6/FVftADzCZ3GWd9CywD10mIEStqhCj3M=) 2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:16:e1:19:d1:d9:c0:1b:12:eb:0f:50:4f:5f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Validity Not Before: Feb 9 06:00:54 2026 GMT Not After : Feb 10 06:00:54 2026 GMT Subject: CN=6ec43b4e889c61b71e2494ad6d245f3bc28cc145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:40:3e:fd:56:a8:b8:f8:ea:57:83:ea:a7: 27:ca:5c:fc:af:85:5d:8d:79:d2:fb:48:b4:47:66: 0d:ba:40:84:c1:37:4e:d8:75:a6:a5:1a:5b:77:f1: bb:a7:3f:65:39:f4:9a:45:53:13:8f:bb:7c:5b:2e: e5:15:72:34:a7:d5:4d:28:d7:74:66:8b:f7:cd:b7: 2a:58:0c:23:27:49:b9:cc:a3:34:89:b9:09:4a:2d: 41:72:1b:38:24:26:1f:61:35:ce:10:ad:d8:6e:bd: 44:57:b1:86:56:34:fc:ee:ec:2a:d7:c6:ac:9a:a6: db:dc:5b:c3:c9:16:52:07:47:08:b5:8e:ec:84:51: 12:4a:40:58:34:ff:c8:14:d0:a4:be:88:73:33:31: 8f:be:5c:32:fb:29:61:d1:16:89:fc:08:dd:af:2d: b2:7b:f6:76:56:f7:19:06:20:7b:0f:38:d5:c2:a7: ec:20:99:97:a4:2c:50:5c:0f:74:74:22:ca:23:2b: 3b:42:c9:6e:a6:c8:b0:45:4d:64:48:3c:4c:80:3e: 68:fa:0a:9a:ea:a2:37:89:81:58:a0:43:b4:fc:85: b8:d9:ed:79:fd:f3:12:10:2b:3f:60:97:31:2d:0b: 45:0b:55:c6:10:f0:a0:87:87:81:ab:9f:06:e7:55: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C4:3B:4E:88:9C:61:B7:1E:24:94:AD:6D:24:5F:3B:C2:8C:C1:45 X509v3 Authority Key Identifier: keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:02:50:31:87:40:b6:43:cf:f7:38:4f:d6:e7:7b:42:20:6d: 5d:e3:02:8a:42:03:da:6c:d6:be:72:af:e2:21:77:69:2c:78: 46:54:cd:eb:d2:42:f0:97:87:9e:c4:11:f6:0d:8a:18:e6:7f: 0c:4e:f1:45:e1:39:18:6e:d3:23:92:6f:bf:42:b8:6b:c3:e6: 11:61:0e:f1:e0:83:c3:0e:df:b0:22:87:ef:41:0e:ed:df:c2: 32:bd:ff:7a:1f:6d:b6:e3:71:05:9d:a5:0e:19:19:db:1f:f8: b4:b2:3c:cd:37:93:81:c9:cf:ca:80:26:50:bc:4a:b6:f0:83: bb:5c:0b:56:d3:ab:30:37:77:dc:b7:ca:d4:c0:aa:6a:e1:10: aa:69:92:e4:56:87:5a:01:86:ce:41:d2:ab:26:77:81:e2:f0: c4:b8:14:fe:94:2f:67:c2:86:52:ff:29:b1:2e:31:3e:b2:9e: 96:27:bb:d2:41:0e:83:b9:74:82:80:1a:a4:1e:5d:b3:61:5b: 45:57:42:3a:15:d2:9e:2e:d2:5e:d9:7e:92:33:cd:21:c5:87: c2:fa:38:30:64:4b:48:81:fb:16:c6:c1:b9:ce:ae:d2:f6:67: 6c:65:60:8c:0b:ae:d4:87:7b:38:22:d5:48:23:b3:9e:1c:26: 7f:ba:8d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/RbhGdHZwBsS6w9QT196MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz YjU2YzAwHhcNMjYwMjA5MDYwMDU0WhcNMjYwMjEwMDYwMDU0WjAzMTEwLwYDVQQD Eyg2ZWM0M2I0ZTg4OWM2MWI3MWUyNDk0YWQ2ZDI0NWYzYmMyOGNjMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6ZAPv1WqLj46leD6qcnylz8r4Vd jXnS+0i0R2YNukCEwTdO2HWmpRpbd/G7pz9lOfSaRVMTj7t8Wy7lFXI0p9VNKNd0 Zov3zbcqWAwjJ0m5zKM0ibkJSi1Bchs4JCYfYTXOEK3Ybr1EV7GGVjT87uwq18as mqbb3FvDyRZSB0cItY7shFESSkBYNP/IFNCkvohzMzGPvlwy+ylh0RaJ/Ajdry2y e/Z2VvcZBiB7DzjVwqfsIJmXpCxQXA90dCLKIys7QslupsiwRU1kSDxMgD5o+gqa 6qI3iYFYoEO0/IW42e15/fMSECs/YJcxLQtFC1XGEPCgh4eBq58G51VMRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7EO06InGG3HiSUrW0kXzvCjMFFMB8GA1UdIwQY MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct NmY3MWNhZDE2Zjk2LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2 LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwJQMYdA tkPP9zhP1ud7QiBtXeMCikID2mzWvnKv4iF3aSx4RlTN69JC8JeHnsQR9g2KGOZ/ DE7xReE5GG7TI5Jvv0K4a8PmEWEO8eCDww7fsCKH70EO7d/CMr3/eh9ttuNxBZ2l DhkZ2x/4tLI8zTeTgcnPyoAmULxKtvCDu1wLVtOrMDd33LfK1MCqauEQqmmS5FaH WgGGzkHSqyZ3geLwxLgU/pQvZ8KGUv8psS4xPrKelie70kEOg7l0goAapB5ds2Fb RVdCOhXSni7SXtl+kjPNIcWHwvo4MGRLSIH7FsbBuc6u0vZnbGVgjAuu1Id7OCLV SCOznhwmf7qN7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:28 2026 by rpki-client